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COMMUNICATION METHODS AND APPARATUS 

The present invention relates to methods and apparatus for communication between 
a user unit, such as a receiver/decoder, and a remote unit, which may be, for example, 
5 an internet account management system or an internet service provider: 

Receiver/decoders are used for receiving and/or decoding signals, such as television 
signals, which may be transmitted in analogue or digital form. In the case of digital 
transmission, digital channels are encoded into a digital data stream at the transmitter 
10 end, and are decoded at the receiver end using a receiver/decoder, which may be either 
in a digital set-top box (DSTB) or in an integrated digital television. In the case of 
analogue transmission, a receiver/decoder may be provided at the subscriber to convert 
the transmitted signals into a format that may be displayed on a television screen. 

15 Receiver/deqpders typically contain a processor on which programs known as 
applications may be run. An example of an appHcation which may be run on a 
receiver/decoder is an intemet access application, which can allow a subscriber to 
access the intemet by means of the receiver/decoder. 

20 Receiver/decoders tend to be of relatively simple construction in order to ensure a low 
unit cost. This can make it difficult to set up a receiver/decoder to communicate with 
a remote network, such as the intemet. In particular, communication with the mtemet 
requires the use of intemet protocols and authentication which may be difficult to 
implement on a receiver/decoder. For example, certain receiver/decoders may not be 

25 able to output data in a format suitable for direct connection to the intemet. Such 
receiver/decoders are referred to as '*non-IP enabled". 

A first aspect of the present invention provides a method of authenticating 
communication between a receiver/decoder and a remote server for providing access 
30 to a network, the method comprising using an identifier of the receiver/decoder to 
authenticate the communication, the identifier being based on an identifier for access 
to broadcast services. 

By use of the invention, authentication of the communication between the 
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receiver/decoder and the remote server can be based on a unique identifier of the 
receiver/decoder to which the receiver/decoder has ready access, which can reduce the 
requirements made of the receiver/decoder. Receiver/decoders are often provided with 
a unique identifier for access to broadcast services, which identifier provides a 
5 convenient means of identifying the receiver/decoder. 

Preferably the identifier is stored on a removable component, such as a smartcard. 

Preferably the identifier is independent of a networic login identifier. This can reduce 
10 the complexity of the receiver/decoder, since the identifier may be simpler than a 
network login identifier, which tend to be complex multicharacter idqitifiers, to 
facilitate memorising by a user. Another drawback with login identifiers is that they 
may change from time to time, or more than one may be required for access to 
different services; the invention may allow a single identifier supplied by a 
15 receiver/decoder to be associated (in a remote server) with a changeable network 
identifier or with a plurality of network identifiers. This feature may be provided 
independently. 

Preferably the identifier is based on a number unique to a smartcard. As used herein, 
20 the term "smartcard" includes, but not exclusively so, any chip-based card device, or 
object of similar fimction and performance, possessing, for example, microprocessor 
and/or memory storage. Included in this term are devices having alternative physical 
forms to a card, for example key-shaped devices such as are often used in TV decoder 
systems. 

The remote server may be for accessing the internet, or it may be an internet account 
management system, or any other form of server, for example, for accessing a remote 
network of any form. 

30 An internet account for a user may be established by an internet account management 
system using the identifier of the receiver/decoder. To establish the account, the 
identifier of the receive/decoder may be compared by the internet account management 
system with a stored list of identifiers of receiver/decoders which may establish 
internet accounts. 
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The remote server may comprise means for sending data to an internet service 
provider, the method comprising the steps of providing details of the intemet account 
to the intemet service provider to establish a bi-directional data pathway between the 
receiver/decoder and the intemet service provider. 

5 

The identifier may be accompanied by data identifying a data pathway to be used for 
communication between the receiver/decoder and the remote server.. In this way. the 
receiver/decoder can specify the pathway to be used for communication; for example 
a sateUite link may be used for the return channel. 

10 

In a prefened embodiment, the login details are in the form: 

login = {smartcard number} {type of services} 
where the type of services (TOS) may specify the channels over which data 
conmiunication is to occur, for example, the case where a category of responses are 
15 to be sent to the temiinal by satellite. 

In a preferred embodiment, the remote server providies the receiver/decoder with 
access to a network having network protocols, and data output from the 
receiver/decoder is converted into data compliant with the network protocols at a 

20 location remote from the receiver/decoder. In this way, a receiver/decoder which is 
not equipped with the network protocols may still communicate with the network. 
The network may be, for example, the internet, and the network protocol may be, for 
example, transport control protocol / internet protocol (TCP/IP). The remote location 
may be, for example, at an operator, which may comprise an intemet account 

23 management system. 

Preferably, the data is converted into said data compliant with the network protocols 
by a gateway interaaediate the receiver/decoder and the remote server. 

30 In a preferred embodiment, the network comprises a plurality of remote devices, said 
converted data being communicated by the gateway to one of said remote devices as 
specified in said data thereby establishing a communication channel between the 
receiver/decoder and the specified remote device. 



wo 01/03421 PCT/IBOO/00968 

-4- 

In a second aspect, the present invention provides a method of communicating data 
from a non-internet protocol enabled user terminal to one of a plurality of internet 
protocol enabled remote devices, the method comprising the steps of communicating 
data using said non-internet protocol from said user terminal to said gateway, said 
5 data including a message and specifying a destination for said message from said 
plurality of remote devices, converting at said gateway said data into data using said 
internet protocol, and conununicating said data using said internet protocol from said 
gateway to the specified destination remote device, thereby establishing a 
communication channel between the user terminal and the specified remote device. 
10 The user terminal may be a receiver/decoder. 

Also provided is a method of communicating between a receiver/decoder and a 
remote network wherein the protocols necessary for communicating with the remote 
network are implemented at a. remote location from the receiver/decoder. 

15 

A message instructing termination of the communication channel may be 
communicated from the receiver/decoder to the gateway using the non-internet 
protocol, the gateway in turn communicating a termmation command to the specified 
remote device using the internet protocol. Preferably, the identification of the 
20 receiver/decoder is authenticated by the gateway before the communication channel 
is established. 

In a third aspect, the present invention provides apparatus for authenticating 
communication between a receiver/decoder and a remote server for providing access 
25 to a network, the apparatus comprising means (for example, a system, server or 
gateway) for using ian identifier of the receiver/decoder to authenticate the 
communication, the identifier being based on an identifier for access to broadcast 
services. The identifier may be accompanied by data identifying a data pathway to 
be used for communication between the receiver/decoder and the remote server. 

30 

The remote server may provide the receiver/decoder with access to a network having 
network protocols, said apparatus comprismg means (for example, a system, server 
or gateway) for converting data output from the receiver/decoder into data compliant 
with 
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the network protocols. 

Preferably the apparatus is a gateway intermediate the receiver/decoder and the ranote 
server. 

5 

Preferably the network comprises a plurality of remote devices, said gateway being, 
ad^ted to communicate the converted data to one of said remote devices as specified 
in said data thereby establishing a communication channel between the 
receiver/decoder and the specified remote device. 

10 

In a fourth aspect, the present invention provides a gateway for communicating data 
received ftom a non-intemet protocol enabled user terminal to one of a plurality of 
internet protocol enabled remote devices, the gateway comprising: 

means (for example, an input) for receiving data communicated using said non- 
15 internet protocol from said user terminal, said data including a message and specifying 
a destination for said message from said plurality of remote devices; and 

means (for example, a converter) for converting the received data into data 
using said internet protocol; and 

means (for example, an output) for communicating said data using said internet 
20 protocol to the specified destination remote device, thereby establishing a 
communication channel between the user terminal and the specified remote deyice. 

The gateway may comprise a plurality of input/output ports each for connection to a 
re^ective remote device. 

25 

The gateway may comprise means (for example, an identifier) for idaitifying a 
message from the user terminal instructing termination of the communication channel; 
and means (for example, an output) for passing a termination command to the 
specified remote device. 

30 

The invention also provides a method and apparatus substantially as described with 
reference to and as illustrated in the accompanying drawings. 

Features of one aspect may be applied to other aspects; similarly, method features may 
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be applied to sqsparatus aspects and vice versa. 

Preferred features of the present invention will now be described, purely by way of 
example, with reference to the accompanying drawings, in which:- 

5 

Figure 1 shows the architecture of a typical digital television system; 
Figure 2 is a schematic diagram of a receiver/decoder; 
Figure 3 shows an overview of an internet access system; 
Figure 4 illustrates software layers in the user equipment of Figure 3; 
10 Figure 5 shows the architecture of an int^et access system; 

Figure 6 shows the main components of an internet account management 
system; 

Figure 7 shows a part of the configuration of the internet access system in the 
case where the receiyer/decoder is not IP enabled; 
IS Figure 8 illustrates protocol layers of the system shown in figure 7; 

Figure 9 diagrammatically illustrates the protocol adopted for communication 
between the user equipment and the gateway in the system of figure 7; and 

Figure 10 diagrammatically illustrates the protocol adopted for authentication 
related commimication between the user equipment and the gateway in the system of 
20 figure 7. 

An overview of a digital television system 1 is shown in Figxire 1. The invention 
includes a mostly conventional digital television system 2 that uses the known MPEG- 
2 compression system to transmit compressed digital signals. In more detail, MPEG-2 
25 compressor 3 in a broadcast centre receives a digital signal stream (typically a stream 
of video signals). The compressor 3 is connected to a multiplexer and scrambler 4 by 
linkage 5. 

The multiplexer 4 receives a plurality of fiirther input signals, assembles the transport 
30 stream and transmits compressed digital signals to a transmitter 6 of the broadcast 
centre via linkage 7, which can of course take a wide variety of forms including 
telecommunications links. The transmitter 6 transmits electromagnetic signals via 
uplink 8 towards a satellite transponder 9, where they are electronically processed and 
broadcast via notional downlink 10 to earth receiver 12, conventionally in the form 
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of a dish owned or rented by the end user. Other transport channels for transmission 
of the data are of course possible, such as terrestrial broadcast, cable transmission, 
combined satellite/cable links, telephone networks etc. 

The signals received by receiver 12 are transmitted to an integrated receiver/decoder 
13 owned or rented by the end user and comiected to the end user's television set 14. 
The receiver/decoder 13 decodes the compressed MPEG.2 signal into a television 
signal for the television set 14. Although a separate receiver/decoder is shown m 
Figure 1 the receiver/decoder may also be part of an integrated digital televujion. 
As used herein, the term "receiver/decoder" includes a separate receiver/decoder, 
such as a set-top box, and a television having a receiver/decoder integrated therewith. 

In a multichamiel system, the multiplexer 4 handles audio and video information 
received from a number of parallel sources and interacts with the transmitter 6 to 
broadcast the mformation along a corresponding number of channels. In addition to 
audiovisual information, messages or applications or any other sort of digital data 
may be introduced in some or all of these chamiels interlaced with the transmitted 
digital audio and video information. 

A conditional access system 15 is comiected to the multiplexer 4 and the 
receiver/decoder 13. and is located partly in the broadcast centre and partly m the 
receiver/decoder. It enables the end user to access digital television broadcasts from 
one or more broadcast suppliers. A smartcard, capable of deciphering messages 
relating to commercial offers (that is. one or several television programmes sold by 
the broadcast suppUer). can be inserted into die receiver/decoder 13. Usmg the 
receiver/decoder 13 and smartcard. the end user may purchase commercial offers m 
either a subscription mode or a pay-per-view mode. 

As mentioned above, programmes transmitted by the system are scrambled at the 
30 multiplexer 4. flie conditions and encryption keys applied to a given transmission 
being determined by the access control system 15. Transmission of scrambled data 
in tills way is well known in the field of pay TV systems. Typically, scrambled data 
is transmitted together with a control word for descrambling of the data, tiie control 
word itself being encrypted by a so-called exploitation key and transmitted m 



20 



25 
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encrypted form. 

The scrambled data and encrypted control word are then received by the 
receiver/decoder 13 having access to an equivalent to the exploitation key stored on 
a smart card inserted in the receiver/decoder to decrypt the encrypted control word 
and thereafter descramble the transmitted data. A paid-up subscriber will receive, for 
example, in a broadcast monthly EMM (Entitlement Management Message) the 
exploitation key necessary to decrypt the encrypted control word so as to permit 
viewing of the transmission. 



10 



An interactive system 16. also connected to the multiplexer 4 and the 
■ receiver/decoder 13 and again located partly in the broadcast centre and parUy in the 
receiver/decoder, enables the end user to interact with various applications via a 
modemed back channel 17. The modemed back channel nay also be used for 
15 communications used in the conditional access system 15. 

Physical interfaces of the receiver/decoder 13 are used for downloading data. With 
reference to Figure 2, the receiver/decoder 13 contains, for example, six downloading 
devices; serial interface 30, parallel interface 32. modem 34, two card readers 36. 
20 and MPEG flow tuner 38. 

The broadcast and reception system is also used to provide internet services such as 
web browsing and e-mail. An application which is run by the receiver/decoder 13 
enables the receiver/decoder to access internet services and to display web pages and 
25 e-mails either on television set 14 or via a computer connected to the receiver/decoder 
13. 

Referring to Figure 3, an overview of the internet access system wiU be described. 
User equipment 20 (which includes a receiver/decoder) communicates with operator 
30 22 via the pubUc switched telephone network (PSTN) 24. The user equipment sends 
a request to the operator 22 to be sent certain data, for example, a particular web page 
or e-mail. The operator receives this request and outputs the request to internet 
service provider (ISP) 26. In response to this request, the ISP suppUes a response to 
the operator, which might comprise a requested web page obtained ftom the internet 
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27, or an e-mail which was waiting for the subscriber at the ISP. The operator 
delivers the response to the broadcast centre 28, where it is integrated into the MPEG 
bitstream, for example as a private section, and transmitted by the transmitter 6 and 
received by receiver 12 as previously described. Where the receiver/decoder is IP- 
5 enabled, i.e. equipped with the protocols for receiving data from the internet, the 
information may be transmitted as an IP frame in the MPEG bitstream, that is, in the 
DP format. If the receiver/decoder is not IP-enabled then the data is sent in some other 
way, e.g. as a private MPEG section. The user equipment 20 extracts the response 
from the MPEG bitstream and displays it on a television set or on a computer screen. 
10 The response may alternatively be transmitted to user equipment 20 via the PSTN 24. 

The software levels employed in the user equipment 20 are shown in Figure 4. The 
application level comprises a web browser and e-mail application, which may be a 
commercial application such as Netscs^je or Microsoft Internet Explorer and Outlook 

15 Express, or an application specifically designed to run on a receiver/decoder. Below 
the application level are HTTP, socket, TCP/IP, PPP/SLIP and a driver level. The 
driver level is modified, as compared with a browser application running traditionally 
on a PC, in that it is divided into a modem driver for communicating with the PSTN 
24 via the modem of the user equipment and a tuner driver for communicating via the 

20 MPEG flow tuner 4028. 

Various configurations of the user equipment 20 are possible. In one configuration a 
PC is not used and all of the user software runs on the receiver/decoder 13. In this 
configuration the receiver/decoder 13 communicates with the PSTN 24 either via an 

25 internal modem or via an external modem and the serial port. The receiver/decoder 13 
can receive Internet responses in the bitstream from the earth receiver 12. The user 
interface is provided by a remote controller or keyboard and a television set connected 
to the receiver/decoder 13. In this configuration, the TCP/IP level shown in Figure 
4 may be omitted, in which case a gateway located at the operator provides the 

30 necessary protocols, as will be described later. 

In another configuration a personal computer (PC) is provided which is connected by 
its parallel port to the parallel port 32 of the receiver/decoder 13 (or optionally by its 
serial port to the serial port 30 of the receiver/decoder 13). In this case, an upper 
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poition of the software levels shown in Figure 4 run on the PC, and the remaining 
lower portion of the software levels run on the receiver/decoder 13. The user interface 
is provided by a keyboard and a monitor connected to the PC. 

5 In a fiirther configuration a PC is connected to the PSTN 24 via an intemal or external 
modem of the PC. In this configuration, the receiver/decoder 13 may be provided 
separately or in the form of an add-on or plug-in card of the PC, connected to the ISA 
or PCI bus thereof 

10 The architecture of the internet access system is shown in Figure 5. Referring to 
Figure 5, internet account management system (lAMS) 50 is linked to internet service 
provider (ISP) 26 which provides services such as web browsing and e-mail. The 
lAMS 50 is also linked to subscriber management system (SMS) 60 which mmages 
subscribers and sends requests to the lAMS to grant or deny access to internet 

15 services. Receiver/decoder 13 is connected to the lAMS via an intemal modem, the 
public switched telephone network (PSTN) 24, network access server (NAS) 56, and 
gateway 58. 

The SMS is also connected to Subscription Authorisation System (SAS) 61, which 
20 manages authorisations and subscribers' orders for broadcast services, such as 
broadcast television services. The SMS runs the SAS and lAMS systems in parallel 
and ensures consistency between the two systems. Communication between the SMS 
and the SAS and lAMS takes place using a real time TCP/IP link using batch files. 

25 Gateway 58 allows subscribers to access internet services in real time. Such services 
include mail services for sending and receiving mail and other services which may 
be provided by ISP 26, and provisioning services and reminder services, which are 
provided by the lAMS. Functionally, the gateway 58 is a message router that enables 
communication with various different systems in a single modem connection. Where 

30 the receiver/decoder is not equipped with TCP/IP protocols for communicating with 
the ISP, the gateway also provides the necessary protocols for the receiver/decoder 
to communicate with the ISP. The receiver/decoder 13 then communicates with the 
ISP via gateway 58, as indicated by line 59 in Figure 5. Where the receiver/decoder 
is equipped with the necessary protocols, communication can take place with the ISP 
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direcUy. as indicated by dashed line 57 in Figure 5. The gateway comprises a 
conununication server and an e-mail dispatcher. 

ISP interface 66 allows each modification related to a user's account which takes place 
5 in the lAMS to be duplicated to a user account in ISP 26 in charge of hosting internet 
services, such as mail services. It should be noted that all information relating to 
subscriber accounts is coitralised in the lAMS, which ensures the management of TV 
and internet parameters. The lAMS also manages the relationship between the internet 
parameters and TV parameters, through its interface with Subscriber Management 
10 System (SMS) 60. SMS 60 manages subscribers and sends requests to the lAMS in 
ordCT to grant or to deny access to internet services by subsoibers. 

In order to set up an lAMS account, a subscriber first sends a request for a new 
account, together with information such as requested e-mail address and selected 

15 options, from the receiver/decoder 13 to the lAMS 50. The JAMS checks the 
smartcard number of the subscriber against a list of smartcard numbers, obtained from 
subscriber management system (SMS) 60, corresponding to subscribers for which it 
may set up internet accounts. The lAMS then sends a request to the ISP to set up an 
intemet account. Once the account has been set up, the ISP returns an 

20 acknowledgement to the lAMS, together with a password. The password is initially 
defined by the SMS, but may be modified later by the subscriber. The lAMS account 
mformation (password, e-mail address and intemet parameters), is stored in the lAMS, 
along with the smartcard number of the subscriber. The lAMS informs the subscriber 
that his account has been set up. The subscriber can then send and receive mail to and 

25 fiom the mail server 28. 

The main components of the lAMS are shown in Figure 6. The main fimctions of the 

lAMS are as follows: 

o maintaining a centralised list of e-mail account parameters linked to 
30 subscriber parameters such as smartcard number 

o granting or denying access to intemet services for a subscriber at the request 
of the SMS 

o customising intemet accounts at the request of subscribers (provisioning) 
o reminder service, which allows an e-mail user to register an evoit and to 
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be warned by an e-mail at the time of the event 

o duplication service, which allows updates of the lAMS contents to be 
copied to a related SCTver, such as an ISP 

5 Central to the lAMS is a relational database management system (RDBMS) 70, which 
contains subscription information for internet services and e-mail accounts, stored in 
storage means 72. SMS communication interface 74 allows the lAMS to communicate 
with the SMS, so that the JAMS may be updated with the details of subscribers who 
have been granted or denied access to mail services. Provisioning server 76 allows 

10 a subscriber to manage and customise his e-mail account. Reminder server 78 allows 
a subscriber to manage a list of events. An event is related to a subscriber's e-mail 
account. A subscriber may register an event and receive an automatic reminder a 
predetermined number of days before the event via an automatically generated e-mail. 
E-mail notification interface 84 allows the EMNS 62 to search for a subscriber's 

15 notification preferences in the lAMS RDBMS 70 in order to send an over air 
notification message. Support server 80 allows an administrator to check the presence 
and the status of a subscriber or an e-mail user in the lAMS. RepUcation service 82 
copies updates of the contents of the lAMS RDBMS 70 to the ISP account 
management system. 



20 



25 



Requests which are sent to the lAMS firom receiver/decoder 13 are directed to the 
appropriate part of the lAMS. such as the provisioning server (for e-mail account 
management) and the reminder server (to manage reminder events), by the gateway 
58. 



The internet access system described above allows broadcast service providers also to 
provide internet services. The operator of the system mamtains internet accounts 
independently of internet service providers, so that the operator is not tied to a 
particular internet service provider. By Unking together subscriptions to broadcast 
30 services and subscriptions to the internet, accounts for the two services may be 
managed together which may reduce the amount of processing involved, in comparison 
to the case where accounts are managed separately, and the subscriber may be billed 
together for the two services. 
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Further details of the lAMS are described in co-pendir.g patent application enutled 
-Internet Subscriber Management" in the name of the present applicant, the subject 
n^atter of which is incorporated herein by reference. Further details of the e-ma. 
notification system are described in co-pending patent application entiUed "Method 
i and Apparatus for use with E-mafl" in the name of the present applicant, the subject 
matter of which is incorporated herein by reference. 

A configuration of the internet access system in the case where the receiver decoder 
13 is not internet enabled wiU now be described wi* reference to Figures 7 to 10. 
0 Referring to Figure 7. which shows a portion of the system shown in its entu^ty in 
Figure 5 but with certain aspects delineated in greater detail, receiver / decoder 13 
is of the type previously described in which the unit is not equipped with the transport 
control protocol / internet protocol (TCP/IP) necessary for direct communication w«b 
the ISP 26. Communication, therefore, takes place via DSTB Gateway 58. THe 
5 Provisioning server 76 and Reminding server 78 are shown in the figure as disunct 
■ portions of the lAMS 50 and. in the embodiment, data is routed to each via separate 
lines 76a and 78a as appropriate. 

1, WiU be al^reciated. .herefore. to. there are in effect four subsystems of um^ 
,0 ram eotmuuicaaon between the receiver / de«Kier 13 and any 

d«,ired to be accessed. These are the receiver / decoder 13 itself, the NAS 56. the 
Gateway 58 and the remote server which in the embodiment may be any one of 
provisioning server 76, reminding server 78 or mail server 64. Hie PSTN 24 |S 
effectively dau transparent. In the embodiment maU server 64 is acc^ v» 
25 interface 66 and the ISP 26 bm this need not be the case and the matt senrer 64 cmti 
be directly accessed from the Gateway 58. Moreover, although shown as a smgle 
unit in Ute figure, dte mail server 64 may consist of Rvo separate unic., a firs, to 
^ emails (which may be for example a SMTP server) «.d a second to 
recdving emaUs (which may be to example a IMAP server). In such an 
30 configuration, dte Gateway 58 may communicate with the Wo units which compns. 
the maU server via two separate ports. 

difierem protocol levels hamlled by each of the four above described sub^ 
wUl now be described wim reference to figure 8. As wttl be seen fton the figure. 
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the receiver / decoder 13 has four protocol levels as follows (highest level first): an 
application level protocol (which will be application dependent) and may, for 
example, be SMTP, IMAP or the like; a Gateway protocol (this being the level used 
for the receiver / decoder - Gateway communication as will be more fully described 
5 below); a PP4 protocol and a modem layer such as v22 or v42 bis. The operation 
of these latter two layers will be well known to the skilled person. 

The NAS 56 functions at a single protocol layer and is effective to convert the 
modem layer (used to communicate across the PSTN 24) to internet protocol TCP/IP. 

10 

The Gateway 58 has three operative protocol layers (again highest first), namely the 
Gateway protocol layer, the PP4 protocol layer and TCP/IP. 

Finally the remote server will generally have two protocol layers an upper layer at 
15 the application level protocol and a lower layer at TCP / IP protocol. 

The Gateway protocol therefore allows the Gateway 58 to respond to messages and 
in appropriate cases identify the intended recipient of data and forward the data to that 
recipient. The protocol also allows the receiver / decoder 13 to initiate various 

20 Gateway 58 / remote server operations. In the embodiment, the Gateway 58 is 
responsible for directing SMTP or IMAP data to the mail server 64; directing data 
to provisioning server 76 which may include requests to provide for the creation of 
new accounts; directing data to the reminder server 78 which may include requests 
for event registration; constructing messages to be sent to the receiver / decoder 13 

25 on the basis of data received from any one of the mail server 64, the provisioning 
server 76 or the reminder server 78 and handlmg the communication of such 
constructed messages. In addition the Gateway has the ability to perform a receiver 
/ decoder authentication function. 

30 The low level communication between the receiver / decoder 13 and the Gateway 58 
will now be described. As a first step, modem communication is established between 
the receiver / decoder 13 and the NAS 56 over PSTN 24. Any suitable modem 
format may be used, for example v22 or v42bis. At this time a "chat" sequence 
occurs at the modem level between the receiver / decoder 13 and the NAS 56 so as 
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fully to establish the communications channel. Thereafter the NAS 56 establishes a 
connection channel with the Gateway 58 at the TCP protocol level. Following this 
event, a token is sent by the Gateway 58 to the receiver / decoder 13, this token 
being a pre-specified character sequence. The receipt of such a token by the receiver 
5 / decoder 13 notifies it of the presence of the Gateway 58 and a communications 
channel between the receiver / decoder 13 and the Gateway 58 at the gateway 
protocol level is thereby established. 

The established gateway protocol communications channel is, in effect, under the 
10 control of the receiver / decoder 13. It is the receiver / decoder which must request 
the channel before message exchange can occur. Additionally the discoimection 
procedure (described below) is instigated by the receiver / decoder 13 in order to 
close the channel. 

15 It should be noted that, in this embodimeiit, the gateway protocol allows the 
establishment of a smgle TCP channel with a corresponding remote server. In other 
words, in this embodiment, the receiver / decoder 13 cannot be connected to more 
than one remote server at any one time. However, the receiver / decoder 13 may 
establish and release connection to different remote servers without needing to 

20 establish a fresh communications channel between it and the Gateway 58. 

It should further be noted that, m the embodunent, the gateway protocol layer does 
not perform any error recovery function since the lower level protocols (modem / 
TCP) ensure the transport of data and the upper level protocols (application protocols) 
25 perform error handling. 

The general message structure of communications in the Gateway protocol will now 
be described. Each message structure contains the following fields: 

30 {protocol version} {command identifier} {data length} [parameters] 

where {...} indicates mandatory fields and [...] optional fields. 

The message structure is the same regardless of whether the message emanates from 
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the receiver / decoder 13 or the Gateway 58. The fields are binary encoded with the 
most significant bit first. 

The protocol version (PRT) field comprises a single byte identifying the protocol 
5 version. 

The command identifier (CI) field comprises two bytes and identifies the type of 
message represented. The various types of message will become apparent from the 
data exchange events descriptions outlined below. 

10 

The data length (DL) field is two bytes in length and identifies the overall length of 
the appended parameters field (if any). This permits the parameter field to be of 
variable length. If there are no appended parameter fields, this field will contain a 
zero value. 

15 

The parameters field is encoded in TLV form (Type Length Value) and contains any 
necessary parameters associated with the message. There are three categories of 
parameter which may be used either individually or in combination dependent upon 
the type of message. In other words tiie type of message defines whidi of the 
20 parameter fields will be present. It will also be appreciated that certain messages (for 
example a message commanding that the connection be reset (MG_RCNX)) may not 
have an associated parameter. 

The first type of parameter (REMOTE_SERVER) is used to identify the remote 
25 server and contains an integer indicative of whether the server identified is the STMP 
portion of the maO server 64, the IMAP portion of the mail server 64, the 
provisioning server 76 or the Reminder server 78. In the embodiment, this parameter 
is two bytes long. In a modification the parameter could be used to identify other or 
additional servers. 

30 

The second type of parameter (BODY) is used to contain data received from or to be 
sent to a remote server of interest. This parameter is of variable length as defined 
by the data length field hence meaning that the data packages need not be of pre- 
determined length. A maximum length of this parameter is predefined. 
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The third type of parameter (ERROR^CODE) is used to identify an error condition. 
This may be used to indicate, for example, when the Gateway is unable to open a 
connection with the specified remote server, when connection has been lost with the 
remote server, when a error is detected in a message received from the receiver / 
5 decoder 13, when no data has been received from a remote server following a 
command from the receiver / decoder 13 or when authentication has failed. In the 
embodiment, this parameter is two bytes in length. 

In a modification, there may be a fourth type of parameter used to contain 
10 authentication details. 

A typical data exchange sequence representative of normal dialogue over the Gateway 
protocol level communications channel will now be described with reference to Figure 
9. This shows diagrammatically the messages between the receiver / decoder 13 and 
15 the Gateway 58 together with the corresponding events occurring between the 
Gateway 58 and a selected remote server over a time period (time increasing down 
the page). 

The first event series (el) shown is the gateway protocol level connection procedure 
20 between the receiver / decoder and the specified remote server. The receiver / 
decoder 13 sends a message 1000 requesting connection (MGXNX) containing two 
parameters, a REMOTE^SERVER parameter specifying the server to which it desires 
to conduct a dialogue and a BODY parameter which encapsulates data addressed to 
the remote server (if any). This causes the Gateway to perform two tasks collectively 
25 designated connection 1001 on the Figure, namely to establish connection with the 
specified server via the appropriate link and send via that Imk to the specified server 
the data (if any) contained in the message BODY jparameter. 

Following the above sequence, the remote server sends data 1002 to the Gateway 58 
30 for onward transmission to the receiver / decoder 13. The Gateway encodes this in 
a "data exchange with remote server" (MG_REMOTE) message 1003, having a single 
parameter field, namely BODY which contains this data and sends the message to the 
receiver / decoder 13. A connection is thereby established. 
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Tbe second event series (e2) shown is a typical data exchange sequence. The 
sequence commences with the sending by the receiver / decoder 13 of a "data 
exchange with remote server" (MG_OTHER) message which contains data destined 
for the server in the field parameter BODY. As will be appreciated, the receiver / 
5 decoder 13 only communicates with one remote server at any one time and hence as 
the server will have been already specified by the connection message (e2), it does 
not require to be specified during ordinary data exchange. The receipt of this data 
exchange message 1004 by the Gateway 58 causes it to pass the data therein to the 
remote server in the communication designated 1005. 

10 

The remote server may, thereafter, send data to the receiver / decoder (designated 
1006, 1007) as previously described. 

A further feature of the embodiment will now be described with reference to the 

15 communications designated 1008a, 1008b and 1009. The "data exchange with remote 
server" (MG_REMOTE) message of the type sent from the Gateway 58 to the 
receiver / decoder 13 includes a minimum data packet size. The Gateway 58 will 
not, therefore, send a message to the receiver / decoder 13 until a pre-determined 
minimum amount of data has been received from the remote server (in effect a 

20 minimum data amount threshold) or until a predetermined time has elapsed from the 
receipt of the last data from the remote server (in effect a time out). Thus although 
communication 1008a represents data transfer from the remote server to the gateway 
58, the quantity of this data is lower than the predetermined threshold and hence no 
message is sent to the receiver / decoder 13 at this time. Next a further data transfer 

25 1008b between the occurs from the remote server to the Gateway 58. This transfer 
results in sufficient data being communicated to the Gateway and hence it sends a data 
exchange message 1009 which includes both data sequences 1008a, 1008b. In a 
similar manner, once the quantity of data received by the Gateway 58 from the 
remote server exceeds a maximum amount, a data exchange message is sent to the 

30 receiver / decoder 13. In such an event, a single data exchange sequence between 
the remote server and the Gateway 58 may result in plural messages between the 
Gateway 58 and the receiver / decoder 13. 

In the embodiment the timeout period is 200 milliseconds (ms), the minimum data 
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received threshold is 128 bytes and the maximum data received threshold is 512 
bytes. 

Although not shown in the figure, it may arise that the Gateway 58 receives no data 
5 from the remote server wittiin a pre-determined timeout period which, iii the 
embodiment, is 5 seconds. In such an event, the Gateway sends an "error detected 
by Gateway" (MG^ERROR) message to the receiver / decoder 13 which includes a 
parameter field of the ERROR_^CODE type, the contents of this field specifying the 
occurrence of such an event. The receiver / decoder 13 is responsible for whatever 
10 further action it would like to take which may include the sending of a "reset 
communication" (MG^^RCNX) message which causes the Gateway 58 to close the 
TCP connection with the remote server. 

As foreshadowed above, similar error messages may follow other events such as an 
15 inability to open a connection with the remote server, a loss of connection with the 
remote server or an erroneous message from the remote server. In the latter case this 
may include the receipt of data from the remote server by the Gateway 58 of an 
unknown type, of incorrect length, of an inapplicable value or having an unknown 
protocol version. 

20 

Returning to Figure 9, the event of disconnection from the remote server (e3) will 
now be described. This event is initiated by the receiver / decoder 13 sending a 
"disconnect" (MG_DCNX) message 1020. This message may include data to be 
passed to the remote server in a BODY parameter. This command and data 1021 is 

25 passed to the remote server and the Gateway 58 then waits for an acknowledgement 
and reply data 1022 if any. Subsequently, the Gateway 58 disconnects from the 
remote server (1023) and sends a message 1024 to the receiver / decoder 13 which 
includes the received data if any. Although not shown. m the figure at the low 
protocol level, the receiver / decoder 13 may then close the coimection at modem 

30 level. The Gateway 58 will thereafter be notified by the NAS 56 that the TCP 
connection is closed. 

The authentication process provided for by the Gateway protocol will now be 
described with reference to Figure 10. This may be required for various services. 
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for example provisioning services, before establishment of a communications channel. 
The Gateway 58 contains information upon which servers require authentication prior 
to access and when it receives a "connection request" (MG_CNX) message 1100 for 
such a server it responds with an "authentication request" (MG_AUTHEB_REQ) 
5 message 1101. Such an authentication request message has no accompanying 
parameters. The receiver / decoder 13 must thereafter respond with an appropriate 
"authentication" message 1102. This message has an associated parameter which 
includes authentication data which may, for example, be the smartcard number, as 
more fully set out below. The authentication data may be passed in a BODY type 
10 parameter or, in a modification may have its own parameter type. 

If the Gateway 58 adjudges the authentication details to be correct then the 
authentication is successful (indicated graphically be event 1103) and the Gateway 58 
establishes a connection 1104 with the specified remote server. The Gateway 58 
15 reports that the authentication is successful by sending a data exchange message 1 106, 
which will include any data 1105 received from the remote server in response to the 
opening of the connection. In the case where authentication fails, an error message 
(MG__ERROR) is sent which includes a parameter indicating such a failure as 
previously outlined. 

20 

Returning to the system shown in Figure 5, it is possible to identify two distinct types 
of "account" for the accessing of internet services and the like from receiver / 
decoder 13, namely a so-called "connection account" and a so-called "directory 
account" . Within every connection account there may exist plural directory accounts. 

25 

A connection account provides the basis upon which a subscriber may access the 
operator network. A subscriber will be allocated a single connection account per 
operator although this may be associated with several connection protocols as more 
fiilly described below. The method by which authentication of such an account 
30 occurs is at the network level and will also be described in greater detail below. 

The procedure upon user login by means of his connection account will now be 
described. As will be appreciated, the identification data supplied upon log-in must 
be unique in order to permit the user to be identified by the recipient. In the 
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embodiment, this is achieved by the use of a so-called MSD number, which is at least 
partially derived from the smartcard number of the user's equipment. In addition, 
upon log-in, the user must specify the communications protocol which may vary in 
dependence upon, for example, whether the user is attempting access via a dial-up 
5 modem associated with a computer (which may use, for example, MediaWebPC a 
product of Canal +) or via the type of receiver / decoder imit such as that commonly 
referred to as a "set-top box". The protocols used may, for example, be PAP, CHAP 
or PPP for dial-up modem. 

10 The login information includes, therefore, of the MSD number of the user, a field 
identifying the type of user terminal, a field specifying the type of data return to be 
utilised, a field indicating the client version number and, if applicable, the so-called 
RADIUS domain name of the client. The login will also include a password. In the 
embodiment, this information is formatted as follows: 

15 

login = 

{msn^number} {terminal type} {retum_type} {version} [@RADIUS_domain_name] 
Each of the above fields will now be explained in fuller detail. 

20 

The msn__number field itself consists of the foUowmg string of fields: 
{msn^number} = {RSMC} {RSMN} {chck} 

25 The first of the MSN data fields contains the removable security module product code 
(RSMC) which identifies the type of smartcard. This identification of type may 
include data indicative of the one or more aspects of the technical make-up of the 
card, the manufacturer and the conunercial operator who has provided the card to the 
user. In the embodiment, this field is of two bytes in length and may contain four 

30 digits. 

The second of the MSN data fields contains the removable security module number 
(RSMN). This field includes a code which identifies a smartcard in use. Such code 
is preferably pre-programmed by the smartcard supplier and is unique to the 
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smartcard and hence the user, thereby allowing identification of the user. In the 
embodiment this field is four bytes in length and may contain fifteen digits. 

The final field contains check data (chck) which may be calculated by any known 
5 method, for example, it may be a checksum. 

The terminal_type field will now be explained. As explained above, the terminal may 
be of the so-called "set-top" box variety or may be a computer having a modem 
facility. The field will take the value ^^P" for a PC type terminal and the value "T" 
10 for a set-top box terminal type. It will be appreciated (hat the field could, more 
precisely specify the terminal type and that the provision of such a field also permits 
future expansion by the definition of further and alternative terminal Qpes. 

The retum_type field permits the specification of the method by which return data is 
15 sent to the user. In the embodiment, the field takes the value "M" when all return 
data is to be routed via the modem and the value "S" when data return is to take 
place over both satellite and modem channels. Agiain the possibility of future 
expansion in the methods of providing return data is provided for. 

20 The version data field allows version data to be passed from the receiver / decoder 
13 to the network. In the embodiment this is set at 01 as a default. 

The optional field RADIUS_domain_name permits a client's authentication request 
to be routed to a third part authentication server which may permit the provision by 
25 such a third party of gateways to, for example, different service provider. 

The connection profile will also contain a password field which, in the embodiment, 
has a maximum length of 14 alphanumeric characters. 

30 Return now to describe the directory account this provides the basis for the accessing 
of individual mtemet services, for example proxy with identification, mail, news et 
cetera. A subscriber's du-ectory accounts are linked to his connection account. In 
distinction, however, to a connection account, authentication of a directory account 
occurs at application level. 



wo 01/03421 



PCT/IBOO/00968 



-23- 

As previously staled, the directory account allows the access to divers internet 
services from the receiver / decoder 13. A directory account will generally consist 
of: 

5 - an identifier and password; 

- one or more so-called "e-mail aliases"; 

- in appropriate cases, other data relating to the services offered to the 
subscriber. 

10 The identifer (in appropriate cases in combination with the password) is used to 
control the access by the subscriber of various ISP services, for example access to the 
subscriber's mailbox. Other examples include access to private websites, directories, 
control of access to services, certificates, "mailgroup" registration and the like. 

15 The identifier may also be used to receive e-mails address in the format 
"identifier@domain", in which event the subscriber may need to use his password 
when accessing the mailbox identified by the identifier. 

The e-mail aliases provide for the facility of e-mail receipt by the e-mail server of 
20 messages address to "aliasc^domain**. 

In an embodiment, several directory accounts may be associated with a single 
connection account (so-called "family subscription"). In such an event, it may be 
possible for a user initially to specify the number of directory accounts which are 
25 permissible for each connection account, although it should be noted that each 
identifier and alias must be unique. 

Terms 

30 

The following terms are used herein: 

, E-mail Address An E-mail address is composed of two fields: the E-mail ID 
and the domain name. The form of an e-mail Address is e- 
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E-mail Account 
E-mail Id 
E-mail Notifier 



Internet Account 
10 Management System 



Mailbox 



15 



Mail Server 

20 Message Queue 
Server (MQS) 
Provisioning 
Server 

25 Reminder Server 

Set Top Box 

30 



SmartCard 



mailJd@Domain_Name. 

An E-mail Account provides information about the user that 
a Mail Server needs to process that user's messages. 
The prefix of an e-mail address. An e-mail Id is unique in a 
domain name. 

The e-mail Notifier System allows subscribers (EMN) to be 
notified as soon as they receive a new e-mail in their 
mailboxes. A short message is sent to their STB over-air. 

A system managing subscriber TV account Management 
parameters and related E-mail Accounts System (lAMS) 
parameters 

Messages stored for IMAP delivery are held in a mailbox. A 
mailbox on a mail server must be uniquely identified by a 
mailbox Id. A mail server hosting different domain name can 
not consider tlmt the e-mail Id is unique on the Mail server, so 
the mailbox Id must be the Email address. 
Program that exchanges e-mail with other Mail Servers and 
accepts and delivers messages to mail clients. 

A message management system. 

Allows subscribers to create and customise e-mail accounts 
themselves. 

Allows a user to register an event and receive an automatic 
reminder via an automatic mail. 

The completely assembled, ready to use (STB) digital decoding 
hardware, manufactured in accordance with Digital Video 
Broadcasting standards, CANAL + TECHNOLOGIES 
specifications. It is used as a digital decoder for transmitted 
video, audio, application and data streams so that the end user 
can access television programs and services. 
Cards that electronically store the secret keys of one or more 
conunercial operators and other access information. 
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SmartCard Cards that electronically store the secret keys of one or more 

commercial operators and other access information. 

Subscriber A subscriber is related to a TV account (i.e. a SmartCard 

number). 
5 Subscriber Management 

System (SMS) A system managing data relating to subscribers. 

User A user is related to an e-mail account. There may be multiple 

users for a single subscriber. 

10 The term "receiver/decoder" or "decoder'' used herein may connote a receiver for 
receiving either encoded or non-encoded signals, for example, television and/or radio 
signals, which may be broadcast or transmitted by some other means. The term may 
also connote a decoder for decoding received signals. Embodiments of such 
receiver/decoders may include a decoder integral with the receiver for decoding the 

15 received signals, for example, in a "set-top box", such a decoder functioning in 
combination with a physically separate receiver, or such a decoder including 
additional functions, such as a web browser or integrated with, other devices such as 
a video recorder or a television. 

20 It will be understood that the present invention has been described above purely by 
way of example, and modifications of detail can be made within the scope of the 
invention. 

Each feature disclosed in the description, and (where appropriate) the claims and 
25 drawings may be provided independently or in any appropriate combination. 



Reference numerals appearing in the claims are by way of illustration only and shall 
have no limiting effect on the scope of the clahns. 
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CLAIMS 

1. A method of authenticating conununication between a receiver/decoder and a 
remote server for providing access to a network, the method comprising using an 

5 identifier of the receiver/decoder to authenticate the communication, the identifier 
being based on an identifier for access to broadcast services. 

2. A method according to Claim 1, wherein the identifier is stored on a 
removable component of the receiver/decoder. 

10 

3. A method according to Claim 1 or Claim 2 wherein the. identifier is 
independent of a network login identifier for the receiver/decoder. 

4. A method according to any preceding claim, wherein the identifier is based 
15 on a number unique to a smartcard for use with the receiver/decoder. 

5. A method according to any preceding claim, wherein the remote server is for 
accessing the internet. 

20 6. A method according to any of Claims 1 to 4, wherein the remote server is an 
internet account management system. 

7. A method according to Claim 6, wherein an internet account for a user is 
established by the internet account management system using the identifier of the 

25 receiver/decoder. 

8. A method according to Claim 7, wherein the identifier of the receiver/decoder 
is compared by the internet account management system with a stored list of 
identifiers of receiver/decoders which may establish internet accounts. 

30 

9. A method according to Claim 7 or Claim 8, wherein the remote server 
comprises means for sending data to an internet service provider and wherein said 
method comprises the steps of providing details of the internet account to the internet 
service provider to establish a bi-directional data pathway between the 
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receiver/decoder and the internet service provider. 
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10. A method according to any preceding claim, wherein said identifier is 
accompanied by data identifying a data pathway to be used for conmiunication 

5 between the receiver/decoder and the remote server. 

11. A method according to any preceding claim, wherein the remote server 
provides the receiver/decoder with access to a network having network protocols, and 
data output from the receiver/decoder is converted mto data compliant with the 

10 network protocols at a location remote from the receiver/decoder. 

12. A method according to Claim 1 1 , wherein the data is converted into said data 
compliant with the network protocols by a gateway intermediate the receiver/decoder 
and the remote server. 

15 

13. A method according to Claim 12, wherein the network comprises a plurality 
of remote devices, said converted data beuig communicated by the gateway to one of 
said remote devices as specified in said data thereby establishing a communication 
channel between the receiver/decoder and the specified remote device. 

20 

14. A method of communicating data from a non-internet protocol enabled user 
terminal to one of a plurality of internet protocol enabled remote devices, the method 
comprising the steps of: 

communicating data using said non-internet protocol from said user terminal 
25 to said gateway, said data including a message and specifying a destination for said 
message from said plurality of remote devices; and 

converting at said gateway said data into data using said internet protocol; and 
communicating said data using said internet protocol from said gateway to the 
specified destination remote device, thereby establishing a communication channel 
30 between the user terminal and the specified remote device. 



15. A method according to Claim 14, wherein the user terminal is a 
receiver/decoder. 
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16. A method according to Claim 13 or Claim IS, wherein a message instructing 
termination of the communication channel is communicated from the receiver/decoder 
to the gateway using the non-internet protocol, the gateway in turn communicating 
a termination command to the specified remote device using the internet protocol. 

5 

17. A method according to any of Claims 12, 13, 15 and 16, wherein the 
identification of the receiver/decoder is authenticated by the gateway before the 
communication chaimel is established. 

10 18. Apparatus for authenticating communication between a receiver/decoder and 
a remote server for providmg access to a network, the apparatus comprising means 
for using an identifier of the receiver/decoder to authenticate the communication, the 
identifier being based on an identifier for access to broadcast services. 

15 19. Apparatus according to Claim 18, wherein said identifier is accompanied by 
data identifying a data pathway to be used for conununication between the 
receiver/decoder and the remote server. 

20. Apparatus according to Claim 18 or Claim 19, wherein the remote server 
20 provides the receiver/decoder with access to a network having network protocols, said 

apparatus comprising means for convertmg data output from the receiver/decoder into 
data compliant with the network protocols. 

21. Apparatus accordmg to any of Claims 18 to 20, in the form of a gateway 
25 intermediate the receiver/decoder and the remote server. 

22. Apparatus according to Claim 21, wherein the network comprises a plurality 
of remote devices, said gateway being adapted to communicate the converted data to 
one of said remote devices as specified in said data thereby establishing a 

30 communication channel between the receiver/decoder and the specified remote device . 

23. A gateway for communicating data received from a non-internet protocol 
enabled user terminal to one of a plurality of internet protocol enabled remote 
devices, the gateway comprising: 
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means for receiving data communicated using said non-internet protocol from 
said user terminal, said data including a message and specifying a destination for said 
message from said plurality of remote devices; and 

means for converting the received data into data using said internet protocol; 

5 and 

means for conmiunicating said data using said internet protocol to the specified 
destmation remote device, thereby establishmg a communication channel between the 
user terminal and the specified remote device. 

10 24 . A gateway according to Claim 23 , comprising a plurality of input/output ports 
each for connection to a respective remote device. 

25. A gateway according to Claim 23 or 24, comprising: 

means for identifying a message from the user terminal instructing termination 
IS of the communication channel; and 

means for passing a termination command to the specified remote device. 

26. A method of, or apparatus for, authenticating communication between a 
receiver/decoder and a remote server substantially as herein described. 

20 

27. A method of, or apparatus for, communicating data from a non-internet 
protocol enabled user terminal to one of a plurality of internet protocol enabled 
remote devices substantially as herein described. 



25 28. 



A gateway substantially as herein described. 
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